diff --git a/src/components/explorer/CodeInspectorDock.tsx b/src/components/explorer/CodeInspectorDock.tsx
index 42102a2..fbe7584 100644
--- a/src/components/explorer/CodeInspectorDock.tsx
+++ b/src/components/explorer/CodeInspectorDock.tsx
@@ -59,7 +59,7 @@ export function CodeInspectorDock({ state, setState, filePath, owner, repo }: Co
     const startHeight = dragHeight;
     const onMouseMove = (moveEvent: MouseEvent) => {
       const deltaY = startY - moveEvent.clientY;
-      setDragHeight(Math.max(200, Math.min(window.innerHeight * 0.35, startHeight + deltaY)));
+      setDragHeight(Math.max(200, Math.min(window.innerHeight * 0.9, startHeight + deltaY)));
     };
     const onMouseUp = () => {
       document.removeEventListener('mousemove', onMouseMove);
diff --git a/src/components/ui/SyntaxHighlighter.tsx b/src/components/ui/SyntaxHighlighter.tsx
index 42680e6..02afc69 100644
--- a/src/components/ui/SyntaxHighlighter.tsx
+++ b/src/components/ui/SyntaxHighlighter.tsx
@@ -1,5 +1,6 @@
 import { useMemo } from 'react';
 import hljs from 'highlight.js';
+import DOMPurify from 'dompurify';
 import type { ReactNode } from 'react';
 
 function languageFromPath(path: string): string {
@@ -92,7 +93,7 @@ export function HighlightedCode({
             </span>
             <code
               className="hljs min-w-0 flex-1 whitespace-pre pl-4"
-              dangerouslySetInnerHTML={{ __html: html }}
+              dangerouslySetInnerHTML={{ __html: DOMPurify.sanitize(html) }}
             />
           </div>
         );